Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through <= 1.2.16.Check if you run itEPSS 0.12%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Add to Feedly add-to-feedly allows Stored XSS.This issue affects Add to Feedly: from n/a through <= 1.2.11.Check if you run itEPSS 0.12%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Stored XSS.This issue affects Hide Real Download Path: from n/a tCheck if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue affects WN Flipbox Pro: from n/a through <= 2.1.Check if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial.Check if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through <= 1.6.10.Check if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.This issue affects Database to Excel: from n/a through <= 1.0Check if you run itEPSS 0.13%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video auto-last-youtube-video allows Stored XSS.This issue affects Auto Last Youtube Video: fromCheck if you run itEPSS 0.13%Sep 5, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/Check if you run itEPSS 0.17%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in snagysandor Parallax Scrolling Enllax.js parallax-scrolling-enllax-js allows Cross Site Request Forgery.This issue affects ParallCheck if you run itEPSS 0.14%Sep 5, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One ai-auto-tool allows Server Side Request ForgeCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows Reflected XSS.This issue affects To Lead For Salesforce: frCheck if you run itEPSS 0.13%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerCheck if you run itEPSS 0.14%Sep 5, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through <= 4.3.8.Check if you run itEPSS 0.14%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects NotificationCheck if you run itEPSS 0.14%Sep 5, 2025
- Medium4.3The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of its AJAX request handler, allowing any authenticated users, sCheck if you run itEPSS 0.23%Sep 5, 2025
- High7.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.55%Sep 4, 2025
- High7.2astro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Sep 4, 2025
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of boundCheck if you run itEPSS 0.32%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix rtnl deadlock issue Currently, the hibmcge netdev acquires the rtnl_lock in pci_error_handlersCheck if you run itEPSS 0.11%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces is_bnode_offset_valid() method that checksCheck if you run itEPSS 0.17%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device blockCheck if you run itEPSS 0.15%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent infinite recursion If the buf + offset is not aligned to XE_CAHELINE_BYTES we fallback tCheck if you run itEPSS 0.14%Sep 4, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, whicCheck if you run itEPSS 0.13%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue triggers when a userspace program does an ioCheck if you run itEPSS 0.18%Sep 4, 2025
Sort